Packages

qs

6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed

Your version

6.17.1

latest28 Oct 2026Where it was published

In short

1 security3 fixed3 internal

  • security

    [Fix] parse: guard bracket-wrapped prototype keys at depth 0

Release note

  • parse: interpretNumericEntities: decode code points above U+FFFF as surrogate pairs

  • parse: respect plainObjects for `` with parseArrays: false

  • utils: merge: count the elements of a sparse array against arrayLimit, not its holes

  • parse: guard bracket-wrapped prototype keys at depth 0

  • parse: extract wrapping-bracket stripping helper

  • Document that depth: 0 and depth: false keep keys flat